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(54) Simple high-performance memory management unit 



(57) A method and an apparatus for translating a 
virtual address (104) to a physical address (115) in a 
computer system are described. The system receives 
(602) a virtual address during an execution or a fetch of 
a program instruction. The system determines (604) if 
the virtual address is in an upper portion or a lower por- 
tion of a virtual address space (202). If the virtual 
address is in the lower portion of the virtual address 
space, the system adds (606) the virtual address to a 
first base address (108) to produce the physical 
address. The system also compares (610) the virtual 
address against an upper bound (110). tf the virtual 
address has a larger value than the upper bound, the 
system indicates (614) an illegal access. If the virtual 
address is in the upper portion of the virtual address 
space, the system adds (608) the virtual address to a 
second base address (112) to produce the physical 
address. The system also compares (612) the virtual 
address against a lower bound (114). If the virtual 
address has a lower value than the lower bound, the 
system indicates (616) lliat the access is illegal. Thus, 
the system provides protection from illegal memory 
accesses. According to one aspect of the present inven- 
tion, the system determines (618.620) if the virtual 
address falls within portion of the virtual address space 
that is protected from write accesses, tf so, the system 
disallows write accesses to the virtual address. Thus, 
the present invention dispenses with paging and 
reduces the virtual -to-physical address translation proc- 
ess to a simple addition operation. This leads to faster 



processor clock speeds, and can greatly reduce the 
cost of designing and fabricating a computer system. 
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Description 
BACKGROUND 

Field of fre Invention 

[0001] The present invention relates to memory 
management units for converting virtual addresses to 
physical addresses in computer systems. More particu- 
larly, the present invention relates to a simple, efficient 
and fast method and apparatus for converting virtual 
addresses to physical addresses that provides protec- 
tion from illegal memory accesses. 

Related ah 

[0002] Modern computer systems typically include 
hardware and operating system mechanisms to support 
memory management functions, such as virtual mem- 
ory and paging. Over the years these systems have 
grown in complexity to include hardware structures such 
as memory management units (MMUs) and translation 
lookaside buffers (TLBs) as well as corresponding oper- 
ating system mechanisms to support virtual memory 
and paging. 

[0003] This memory management circuitry pres- 
ently comprises a significant portion of the computa- 
tional circuitry in a computer system. Consequently, the 
task of designing this memory management circuitry 
consumes a great deal of engineering resources, which 
increases the time and expense involved in developing 
a computer system. Furthermore, integrating this addi- 
tional memory management circuitry onto a semicon- 
ductor chip increases the die size of the chip. This can 
lower yield during chip fabrication, which can greatly 
increase system cost. The additional circuitry also 
requires circuit signals to traverse larger distances, 
which can reduce processor clock speeds or result in 
increased latencies for memory accesses, and thereby 
reduce system performance. This results in increased 
latencies for memory accesses. Conventional memory 
management units also typically include circuitry to 
implement content addressable memories (CAMs) 
which consume a great deal of power. 
[0004] Memory management functions also com- 
prise a significant portion of the code in an operating 
system, which can greatly increase the complexity of 
the operating system. This correspondingly increases 
the amount of time and expense involved in developing 
the operating system. 

[0005] FurtherrrK»rAJhe_performance advantages 
of paging mechanisms are somewhat diminished for 
programs written in modem object-oriented program- 
ming languages. References to objects tend to be 
widely dispersed across a large number of pages. Con- 
sequently, such object-oriented programs tend to exhibit 
poor paging performance. 

[0006] What is needed is a memory management 



mechanism that eliminates the complexity of conven- 
tional virtual memory paging systems. 

SUMMARY 

5 

[0007] The present invention provides a method 
and an apparatus for translating a virtual address to a 
physical address in a computer system. The system 
receives a virtual address during an execution or a fetch 

10 of a program instruction. The system determines if the 
virtual address is in an upper portion or a lower portion 
of a virtual address space. If the virtual address is in the 
lower portion of the virtual address space, the system 
adds the virtual address to a first base address to pro- 

is duce the physical address. The system also compares 
the virtual address.against an upper bound. If the virtual 
address has a larger value than the upper bound, the 
system indicates an illegal access. If the virtual address 
is in the upper portion of the virtual address space, the 

20 system adds the virtual address to a second base 
address to produce the physical address. The system 
also compares the virtual address against a lower 
bound. If the virtual address has a lower value than the 
lower bound, the system indicates that the access is ille- 

25 gal. Thus, the system provides protection from illegal 
memory accesses. According to one aspect of the 
present invention, the system determines if the virtual 
address fails within a portion of the virtual address 
space that is protected from write accesses. If so, the 

30 system disallows write accesses to the virtual address. 
Thus, the present invention dispenses with paging and 
reduces the virtual -to-physical address translation proc- 
ess to a simple addition operation. This leads to faster 
processor clock speeds, and can greatly reduce the 

35 cost of designing and fabricating a computer system. 

BRIEF DESCRIPTION OF THE FIGURES 
[0008] 

40 

FIG. 1 illustrates a computer system in accordance 
with an embodiment of the present invention. 
FIG. 2 illustrates how regions of a virtual address 
space are mapped into corresponding regions of a 

45 physical address space in accordance with an 
embodiment of the present invention. 
FIG. 3 illustrates some of the circuitry involved in 
translating a virtual address to a physical address in 
accordance with an embodiment of frie present 

so invention. : - 

FIG. 4 illustrates somejg^a^iourtry^r^iyjc^jn 
detecting an illegal memory access in accordance 
with an embodiment of the present invention. 
FIG. 5 illustrates a computer system with replicated 

55 memory management units for servicing instruction 
references and data references in accordance with 
an embodiment of the present invention. 
FIG. 6 is a flow chart illustrating the process of 
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translating virtual addresses to physical addresses 
in accordance with an embodiment of the present 
invention. 

DETAILED DESCRIPTION 

[0009] The following description is presented to 
enable any person skilled in the art to make and use the 
invention, and is provided in the context of a particular 
application and its requirements. Various modifications 
to the disclosed embodiments will be readily apparent to 
those skilled in the art, and the general principles 
defined herein may be applied to other embodiments 
and applications without departing from the spirit and 
scope of the present invention. Thus, the present inven- 
tion is not intended to be limited to the embodiments 
shown, but is to be accorded the widest scope consist- 
ent with the principles and features disclosed herein. 

Computer System 

[00101 FIG. 1 illustrates a computer system in 
accordance with an embodiment of the present inven- 
tion. This computer system includes central processing 
unit 102, memory management unit (MMU) 106, cache 
116, bus 113, memory 120, peripheral device 122, and 
peripheral device 124. In general, central processing 
unit 102 may include any type of circuitry for performing 
computational operations. This includes, but is not lim- 
ited to, central processing units for mainframe comput- 
ers, personal computers, workstations, device 
controllers and smart appliances (such as a smart 
microwave oven). 

[0011] Central processing unit 102 feeds virtual 
address 104 into MMU 106, which translates virtual 
address 1 04 into physical address 1 15. In the illustrated 
embodiment, MMU 106 contains six values. The values 
"read only" 109 (1 bit), upper bound 110 (15 bits) and 
base address 108 (16 bits) are associated with a lower 
region of a virtual address space 202. The values "read 
only" 111 (1 bit), lower bound 114 (15 bits) and base 
address 112 (16 bits) are associated with an upper 
region of the virtual address space 202. Note that the 
values read only 109, upper bound 110 and base 
address 108 fit within a first 32-bit register, and that the 
values read only 111, lower bound 114 and base 
address 1 12 fit within a second 32-bH register. Packing 
these values into two 32-bit registers facilitates rapid 
context switching. The above six values are described in 
more detail below with reference to FIG. 2. 
[0012] PhysicaUdUress 115 from MMU 106 feeds 
into cache 116, which stores copies of recently refer- 
enced memory items from memory 120. Cache 116 
may be any type of cache memory, including separate 
instruction and data caches. The embodiment illus- 
trated in FIG. 1 includes a unified instruction and data 
cache that is physically addressed. Note that high-per- 
formance computer systems can include a virtually- 



indexed physically-tagged cache in order to initiate 
cache accesses in parallel with MMU operations. How- 
ever, in the illustrated embodiment MMU 106 has a 
very simple design involving only a simple add opera- 

5 tion, that introduces very little propagation delay. This 
allows the MMU operation to be performed before the 
cache lookup without significantly degrading system 
performance. Another embodiment of the present 
invention includes a virtually indexed cache memory 

10 that operates in parallel with MMU 106. 

[0013] Cache 116 is coupled to memory 120 
through bus 1 13. Bus 1 13 may be any type of communi- 
cation channel for carrying data between memory 120 
and microprocessor chip 100. Bus 113 additionally cou- 

75 pies microprocessor chip 1 00 to peripheral devices 1 22 
and 124. Peripheral devices 122 and 124 may be any 
type of peripheral device that can be attached a compu- 
ter system, including, for example, a disk drive or a key- 
board. In an alternative embodiment peripheral devices 

20 122 and 124 are coupled to CPU 102 through a periph- 
eral bus, which is separate from a processor-to-memory 
bus. Memory 120 may be any type of random access 
memory for storing code and data for execution and 
manipulation by central processing unit 102. 

25 

Memory Mapping 

[0014] FIG. 2 illustrates how regions of a virtual 
address space 202 are mapped into corresponding 

30 regions of a physical address space 220 in accordance 
with an embodiment of the present invention. In this 
embodiment, the MMU 106 (see FIG. 1) maps two 
regions of virtual address space 202 into corresponding 
regions in physical address space 220. . 

35 [0015] Lower region 208 starts near the bottom of 
the virtual address space 202 and extends upward. 
Lower region 208 is mapped into a corresponding 
region in physical address space 220. which extends 
upward from base address 108 in physical address 

40 space 220. The upper limit of lower region 208 is delim- 
ited by upper bound 1 10 in virtual address space 202. 
[0016] Upper region 204 starts at the highest 
addressable location in virtual address space 202 and 
extends downward. Upper region 204 is mapped into a 

45 corresponding region in physical address space 220. 
which extends downward from base address 112 in 
physical address space 220. The lower limit of upper 
region 204 is delimited by lower boundJ14 in virtual 
address space 202. Note that up pe r^ region 204 may 

so actually be mapped into a lowe&f!rea^rohysical mem- 
ory than lower region > __ v ^ 
[0017] In the system illustrated in FIG. 1. each 
region is associated with a "read only bit," which facili- 
tates providing "read only" protection to the region. In 

55 the illustrated embodiment read only bits 109 and 1 1 1 
are associated with lower region 208 and upper region 
204, respectively. If read only bit 109 is asserted, lower 
region 208 of virtual address space 202 cannot be mod- 
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rfied. If read only bit 109 is not asserted, lower region 
208 virtual address space 202 can be modified. If read 
only bit 1 1 1 is asserted, upper region 204 of virtual 
address space 202 cannot be modified. If read only bit 
111 is not asserted, upper region 204 virtual address 
space 202 can be modified. These read only bits allow 
a system to support a simple dynamic linked library 
mechanism, which allows a library to be "read only" so 
that it can be shared safely by multiple programs. 
[0018] One advantage of the embodiment illus- 
trated in FIGs. 1 and 2 is that the granularity of transla- 
tion can be coarse. As this coarseness increases, fewer 
bits of virtual address 104 require modification during 
the virtual address translation process. This can reduce 
the size, and hence increase the speed, of an adder that 
is used during the translation process. Furthermore, as 
coarseness increases, more lower-order bits of virtual 
address 104 can be immediately passed into cache 
116, which improves cache performance. 
[0019] Note that the above arrangement allows 
relocations to fall on 64K byte boundaries. The two base 
addresses 108 and 112 contain the upper 16 bits of 
starting physical addresses of the two regions; the cor- 
responding upper and lower bounds 110 and 114 con- 
tain the respective lengths of these two regions. 
[0020] In one embodiment of the present invention, 
an access outside of these two regions causes a hard- 
ware trap. During such a hardware trap, MMU 106 is 
automatically disabled, thereby allowing the trap han- 
dling "supervisor" code to reside in unmapped memory. 
If necessary, the supervisor code can extend the mem- 
ory bounds. 

[0021] Also note that lower region 208 does not 
extend all the way down to address zero. The first 64K 
bytes of virtual address space 202 is occupied by null 
pointer region 210. This provides a mechanism that 
checks for de-referencing a null pointer. This mecha- 
nism operates property so long as no data structure is 
more than 64K bytes in length, which is a common 
restriction. If a data structure is larger that this, a large 
offset from a null pointer can map onto a valid address 
within lower region 208. 

Address Translating QlrcuHrv 

[0022] FIG. 3 illustrates some of the circuitry 
involved in translating a virtual address 104 into a phys- 
ical address 1 15 in accordance with an embodiment of 
the present invention. 

[0023] The circuitry on the left-hand side of FIG. 3 
generates virtual addr ess 1 04. This circuitry includes 
shifter 306. multiplexer (MUX) 310 and adder 312. 
Adder 312 adds the contents of register 302 with the 
contents of either register 304 or immediate field 308. 
This facilitates array indexing, by storing an array base 
address register 302 and an array index in either regis- 
ter 304 or immediate field 308. 
[0024] Note that immediate field 308 facilitates 



using a numerical value from an instruction field as an 
array index. Immediate field 308 may be shifted in 
shifter 306, which is used to multiply the index by the 
array element size. This assumes, of course, that the 

5 array element size is a power of two. Common array ele- 
ment sizes will be, one byte (no shifting) for byte size 
array elements, two bytes (shift one bit) for half-word 
array elements, four bytes (shift two bits) for word-size 
array elements, or eight bytes (shift three bits) for dou- 

10 ble precision array elements. 

[0025] Once virtual address 104 is constructed, it 
feeds into the right-hand side of the circuitry in FIG. 3. 
This circuitry performs the translation from virtual to 
physical addresses. Note that in this embodiment the 

is circuitry only operates on the higher order sixteen bits of 
virtual address 104 and physical address 115, because 
the lower order sixteen bits virtual address 104 and 
physical address 1 15 simply pass through the circuitry 
without translation. 

20 [0026] The higher order 16 bits of virtual address 
1 04 feed through adder 31 4, which adds the bits to base 
address 1 08 to produce a sum which feeds into an input 
of multiplexer (MUX) 318. 

[0027] The higher order 16 bits of virtual address 
25 1 04 additionally feed through adder 3 1 6, which adds the 
bits to base address 1 1 2 to produce a sum which feeds 
into the other input of MUX 318. 
[0028] The highest order bit of virtual address 104 
(bit 31) feeds into the select input of MUX 318. Bit 31 
30 indicates whether virtual address 104 is in upper region 
204 or lower region 208 of virtual address space 202. If 
it is in the upper region 204, the output of adder 316 
becomes the output of MUX 31 8. Otherwise, the output 
of adder 314 becomes the output of MUX 318. 
35 [0029] The output of MUX 318 becomes the upper 
1 6 bits of physical address 1 1 5. Recall that the lower 1 6 
bits of virtual address 104 simply pass through the cir- 
cuit and become the lower 16 bits of physical address 
115. 

40 

Circuitry for Detecting Illegal Accesses 

[0030] FIG. 4 illustrates some of the circuitry 
involved in detecting an illegal memory access in 

45 accordance with an embodiment of the present inven- 
tion. This circuitry operates in parallel with the circuitry 
illustrated in FIG. 3. The circuit illustrated in FIG. 4 
includes AND gates 404, 412, 416 and 415, jas well as 
OR gates 408, 414 and 417. The circu it additionally 

so includes compare units 406 and 410o ^^ " _ 

[0031] Compare units 4Pgibj@d 410^je>errtfne 
whether virtual address 104 falls below lower bound 
114 or exceeds upper bound 110, respectively. Com- 
pare unit 406 determines whether virtual address 104 is 

55 less than lower bound 114. Compare unit 410 deter- 
mines whether upper bound 110 is less than virtual 
address 104. 

[0032] AND gates 404 and 412 detect illegal write 
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operations. AND gate 404 arris together store signal 
402 with read only bit 111 from FIG. 1. The output of 
AND gate 404 is asserted if the operation is a write 
operation and read only bit 1 1 1 is set; this indicates an 
illegal access. AND gate 412 ands together store signal 5 
402 with read only bit 1 09. The output of AND gate 41 2 
is asserted if the operation is a write operation and read 
only bit 109 is set; this similarly indicates an illegal 
access. 

[0033] The outputs of AND gates 404 and 41 2 and 10 
compare units 406 and 410 feed through AND gates 
416 and 415, as well as OR gates 408, 414 and 417 to 
form illegal access signal 418. Illegal access signal 418 
is asserted if virtual address 104 is in the upper portion 
of virtual address space 202 and either AND gate 404 is 
or compare unit 406 is asserted. Illegal access signal 
418 is also asserted if virtual address 1 04 is in the lower 
portion of virtual address space 202 and either AND 
gate 412 or compare unit 410 is asserted. 
[0034] Note that bit 31 of virtual address 104 and 20 
the output of OR gate 408 pass through AND gate 416. 
This makes the upper half of the circuit in FIG. 4 active 
only if virtual address 104 is in the upper portion of vir- 
tual address space 202. Similarly, the inverse of bit 31 
and the output of OR gate 41 4 pass through AND gate 2s 
415. This makes the lower half of the circuit in FIG. 4 
active if virtual address 104 is in the lower portion of vir- 
tual address space 202. 

[0035] Note that the circuitry for detecting null 
pointer region 210 is not shown. An access to null 30 
pointer region 210 can be detected by using another 
compare unit that compares virtual address 104 against 
the 64K upper boundary of null pointer region 210. tf vir- 
tual address 1 04 falls below this upper boundary, an ille- 
gal access is indicated. An access to null pointer region 35 
210 may alternatively be detected by examining the 
higher order bits past the first 16 bits of virtual address 
104. rf these bits are all zero values, virtual address 104 
falls within null pointer region 210. 

[0036] Also note that it is possible to perform 40 
bounds checking on physical addresses instead of vir- 
tual addresses; this results in precise memory excep- 
tions as opposed to imprecise asynchronous memory 
exceptions. 

45 

Replicated Memory Management Units 

[0037] FIG. 5 illustrates a computer system with 
replicated memory management units for servicing 
instruction references and data references in accord- so 
ance with an emb odimen t of the present invention. In 
this embodiment instruction fetch unit 502 within CPU 
102 is coupled to instruction cache 510 through MMU 
506. This pathway takes care of instruction references. 
For data references, load store unit 504 within CPU 102 ss 
is coupled to data cache 512 through MMU 508. 
[0038] Note that MMU 508 is an exact replica of 
MMU 506. and that these MMUs are kept in consistent 



states. This means MMU 506 and MMU 508 contain the 
same values in read only bits 109 and 1 1 1 , as well as in 
upper bound 1 10, lower bound 1 14, base address 108 
and base address 112. 

[0039] The simple MMU design of the present 
invention allows the MMUs to be replicated without tak- 
ing up large amounts of semiconductor real estate. 
Also, note that providing multiple MMUs reduces 
address translation contention between instruction and 
data references. 

Process Of Adtfress TVansiatlon 

[0040] FIG. 6 is a flow chart illustrating the process 
of translating virtual addresses to physical addresses in 
accordance with an embodiment of the present inven- 
tion. The system starts by receiving virtual address 104 
during an execution or a fetch of a program instruction 
(step 602). The system determines if virtual address 
104 is an upper portion or a lower portion of virtual 
address space 202 (step 604). This can be determined 
by examining the most significant bit of virtual address 
104. K the bit is asserted, virtual address 104 is in the 
upper portion. Otherwise, it is in the lower portion. 
[0041] If virtual address 104 is in the lower region 
208 of virtual address space 202. the system adds vir- 
tual address 104 to base address 108 to produce phys- 
ical address 115 (step 606). The system also compares 
virtual address 104 against upper bound 110 (step 
610). If virtual address 104 is larger than upper bound 
110, the system asserts illegal access signal 418 (step 
614). The system also examines read only bit 109. If 
lower region 208 of virtual address space 202 is "read 
only" and the access is a store operation, the system 
also asserts illegal access signal 418 (step 618). 
[0042] If virtual address 104 is in the upper region 
204 of virtual address space 202, the system adds vir- 
tual address 104 to base address 1 1 2 to produce phys- 
ical address 115 (step 608). The system also compares 
virtual address 104 against lower bound 114 (step 61 2). 
If virtual address 104 is smaller than lower bound 114, 
the system asserts illegal access signal 418 (step 616). 
The system also examines read only bit 1 1 1 . ff upper 
region 204 of virtual address space 202 is "read only" 
and the access is a store operation, the system also 
asserts illegal access signal 418 (step 620). 
[0043] Note that for both the upper region 204 and 
the lower region 208 the conversion operation is an 
addition. The conversion for upper, region 204 may 
appear to involve a subtrartioo^ofjeratipn because 
upper region 204 starts^yfaftgop of vlnuaLaddress 
space 202 and offsets proceed downward. However, a 
downward offset can be implemented with an adder 
using two's complement arithmetic. 
[0044] In the embodiment illustrated in FIG. 5. the 
test for "read only" is redundant for MMU 506 because 
MMU 506 handles instructions, which are all "read only." 
[0045] The foregoing descriptions of embodiments 
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of the invention have been presented for purposes of 
illustration and description only. They are not intended 
to be exhaustive or to limit the invention to the forms dis- 
closed. Accordingly, many modifications and variations 
will be apparent to practitioners skilled in the art Addi- 5 
tionally, the above disclosure is not intended to limit the 
invention. The scope of the invention is defined by the 
appended claims. 

Claims "? 

1. A method for translating a virtual address (104) 
into a physical address (1 15) in a computer system, 
comprising: 

15 

receiving the virtual address during an execu- 
tion or a fetch of a program instruction; 
determining (604) if the virtual address is in an 
upper portion or a lower portion of a virtual 
address space (202); 20 
if the virtual address is in the lower portion of 
the virtual address space, 

adding (606) the virtual address to a first 
base address (108) to produce the physi- 25 
cal address, and 

comparing (610) the virtual address 
against an upper bound (110), 
if the virtual address has a larger value 
than the upper bound, indicating (614) that 30 
the access is illegal; and 

if the virtual address is in the upper portion of 
the virtual address space, 

35 

adding (608) the virtual address to a sec- 
ond base address (112) to produce the 
physical address, and 
comparing (612) the virtual address 
against a lower bound (1 1 4), 40 
if the virtual address has a lower value 
than the lower bound, indicating (616) that 
the access is illegal. 

2. The method of claim 1 , further comprising: 45 

if the virtual address is in the lower portion of 
the virtual address space, determining if the 
lower portion of the virtual address space is 
protected from write accesses, and if so disal- so 
lowing (618) jKiila ..accesses to the virtual 
address; and 

if the virtual address is in the upper portion of 
the virtual address space, determining rf the 
upper portion of the virtual address space is ss 
protected from write accesses, and if so disal- 
lowing (620) write accesses to the virtual 
address; 



3. The method of claim 1 or claim 2, further com- 
prising disabling address translations during oper- 
ating system accesses to memory. 

4. The method of any one of claims 1 to 3, wherein 
the upper portion of the virtual address space (202) 
contains read-only library routines. 

5. The method of any one of claims 1 to 4, wherein 
the program instruction may include an instruction 
that bypasses a cache (116) in the computer sys- 
tem for direct memory access (DMA) operations. 

6. The method of any one of claims 1 to 5, further 
comprising determining if the access involves a null 
pointer by comparing the virtual address against a 
range of null pointer addresses (210), and if the vir- 
tual address falls within the range of null pointer 
addresses, indicating (614) that the access is ille- 
gal. 

7. The method of any one of claims 1 to 6, wherein 
the method is performed within a memory manage- 
ment unit (106) that is integrated into a microproc- 
essor chip (100). 

a An apparatus (106) for translating a virtual 
address (104) into a physical address (115) in a 
computer system, comprising: 

an input that receives the virtual address dur- 
ing an execution or a fetch of a program 
instruction; 

an adder (314,316) that creates a sum of the 
virtual address and a first base address (1 08) if 
the virtual address is in a lower portion of a vir- 
tual address space, and that creates a sum of 
the virtual address and a second base address 
(112) if the virtual address is in an upper por- 
tion of the virtual address space; and 
an access validating circuit that indicates an 
illegal access (418) if the virtual address is in 
the lower portion of the virtual address space 
and the virtual address has a larger value than 
an upper bound (110), and that indicates an 
illegal access if the virtual address is in the 
upper portion of the virtual address space and 
the virtual address has a lower value than a 
lower bound (114). ^ JT^ ' 

9. The apparatus of c|ajr&§^hereih^he, adder ^ . 
includes: 

a first adding circuit (314) for adding the virtual 
address to the first base address (108); 
a second adding circuit (316) for adding the vir- 
tual address to the second base address (1 1 2), 
and 
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a selector circuit (318) that selects between an 
output of the first adding circuit and an output of 
the second adding circuit. 

1 0. The apparatus of claim 8 or daim 9, wherein the s 
access validating circuit is configured to determine 

rf the lower portion of the virtual address space is 
protected from write accesses, and if so to disallow 
write accesses to the lower portion of the virtual 
address space, and is configured to determine if 10 
the upper portion of the virtual address space is 
protected from write accesses, and if so to disallow 
write accesses to the upper portion of the virtual 
address space. 

15 

1 1 . The apparatus of any one of claims 8 to 1 0, fur- 
ther comprising a mechanism that disables address 
translations during operating system accesses to 
memory. 

20 

12. The apparatus of any one of claims 8 to 11, 
wherein the upper portion of the virtual address 
space (202) contains read-only library routines. 

1 3. The apparatus of any one of claims 8 to 1 2, fur- 25 
ther comprising a mechanism that bypasses a 
cache (1 16) in the computer system for direct mem- 
ory access (DMA) operations. 

14. The apparatus of any one of claims 8 to 13, 30 
wherein the access validating circuit is configured 

to determine rf the access involves a null pointer by 
comparing the virtual address against a range of 
null pointer addresses (210), and if the virtual 
address falls within the range of null pointer 35 
addresses, indicating (614) that the access is ille- 
gal. 

15. The apparatus of any one of claims 8 to 14, 
wherein the apparatus is integrated into a micro- 40 
processor chip (100). 

16. A computer system, comprising: 

a central processing unit ( 1 02) ; 45 
a main memory (120); and 
a first memory management unit (106) for 
translating a virtual address (104) into a physi- 
cal address (115). coupled between the central 
processing unit and the main memory, the first so 
memory management unit comprising, 

an adder (314,316) that creates a sum of 
the virtual address and a first base 
address if the virtual address is in a lower ss 
portion of a virtual address space, and that 
creates a sum of the virtual address and a 
second base address if the virtual address 



is in an upper portion of the virtual address 
space, and 

an access validating circuit that indicates 
an illegal access (418) if the virtual 
address is in the lower portion of the virtual 
address space and the virtual address has 
a larger value than an upper bound (1 10), 
and that indicates an illegal access if the 
virtual address is in the upper portion of 
the virtual address space and the virtual 
address has a lower value than a lower 
bound (114). 

17. The computer system of claim 16, further com- 
prising a cache memory (1 16) coupled between the 
central processing unit (102) and the main memory 
(120), wherein the first memory management unit 
(106) is coupled between the central processing 
unit and the cache memory. 

19. The computer system of claim 18, further com- 
prising: 

an instruction cache (510) coupled between 
the central processing unit and the main mem- 
ory; 

a data cache (512) coupled between the 
central processing unit and the main mem- 
ory; and 

a second memory management unit (508) 
which is configured identically with the first 
memory management unit (506); 
wherein the first memory management unit 
(506) is coupled between the central 
processing unit and the instruction cache 
(510), and the second memory manage- 
ment unit (508) is coupled between the 
central processing unit and the data 
cache{512), whereby the first memory 
management unit performs translations for 
instruction accesses and the second mem- 
ory management unit performs transla- 
tions for data accesses. 

20. Computer software or firmware for translating a 
virtual address (104) into a physical address (1 15) 
in a computer system, which when_running on a 
computer is capable of perform^ the steps of any 
one of claims 1 to 7. 
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